We have added a DGA detection package to the Integrations app in Kibana. In a single click, you can install and start using the DGA model and associated assets, including ingest pipeline configurations, anomaly detection jobs, and detection rules.

Step 1: Installing the package assets

Step 2: Enriching your data

Step 3: Running anomaly detection

Step 4: Enabling the rules

Detect domain generation algorithm (DGA) activity with new Kibana integration

We added a Living off the land (LotL) detection package to the Integrations app in Kibana. In a single click, you can install and start using the ProblemChild model and associated assets including anomaly detection configurations and detection rules.

作者

Melissa Alvarez

文章

使用新的 Kibana 集成检测域名生成算法 (DGA) 活动

使用新的 Elastic 集成检测隐蔽攻击